No subject
Arisaema Enthusiast Group (AEG) Discussion List (and other=
Arisaema Enthusiast Group (AEG) Discussion List (and other=
Tue Nov 23 07:58:45 CET 2010
hardy Aroids)" <ARISAEMA-L at NIC.SURFNET.NL> Aroids)" <ARISAEMA-L at NIC.SURFNET.NL>
Sender: "Arisaema Enthusiast Group (AEG) Discussion List (and other=
From: David McConachie <pleione at ORCON.NET.NZ>
Subject: Re: Apologies for Spam/ not in my sent folder.
In-Reply-To: <SNT117-DS1342AB2D9DC6A18B2C96AED73E0 at phx.gbl>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D"------------000406010907040606000007"
This is a multi-part message in MIME format.
--------------000406010907040606000007
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Christopher,
You are correct that your email address is being spoofed. If you have a
look at the full header file for the original email there is a line
X-Originating-IP: [93.113.85.59]
If you do a whois search you will see that the IP block is registered to =Fast-Link in Romania
*inetnum*: 93.113.80.0 - 93.113.87.255
netname: SC-FASTLINK-SRL
descr: SC FASTLINK SRL
descr: Drumul Sarii nr.31A
descr: Bucuresti 6
country: ro
admin-c:TM3602-RIPE <http://www.db.ripe.net/whois?searchtext=TM3602-RI=PE&inverse_attributes=admin-c&form_type=simple>
tech-c:TM3602-RIPE <http://www.db.ripe.net/whois?searchtext=TM3602-RIP=E&inverse_attributes=tech-c&form_type=simple>
status: ASSIGNED PA
remarks: Registered through http://www.jump.ro/ip.html
mnt-by:RO-MNT <http://www.db.ripe.net/whois?searchtext=RO-MNT&inverse_=attributes=mnt-by&form_type=simple>
mnt-lower:RO-MNT <http://www.db.ripe.net/whois?searchtext=RO-MNT&inver=se_attributes=mnt-lower&form_type=simple>
mnt-routes:FASTLINK-MNT <http://www.db.ripe.net/whois?searchtext=FASTL=INK-MNT&inverse_attributes=mnt-routes&form_type=simple>
source: RIPE # Filtered
*person*: Timaru Mihai
address: FASTLINK SRL
address: Drumul Sarii 31A
address: Bucharest
phone: +40.744.820.733
e-mail: mihai.timaru at fast-link.ro
nic-hdl: TM3602-RIPE
mnt-by:timarumihai-mnt <http://www.db.ripe.net/whois?searchtext=timaru=mihai-mnt&inverse_attributes=mnt-by&form_type=simple>
source: RIPE # Filtered
David McConachie
On 23/11/2010 1:55 p.m., Christopher Gussman wrote:
> Adam-
> I assumed it went to everyone, but maybe it just went to a subset. It
> was a separate e-mail, not this one. Each one is different but it
> will have some bad writing to the effect of : L ose WE igHt WI th
> New MEthod and a link which should not be clicked on. I thought it
> originated in one of my Yahoo groups (plant related) and so canceled
> them. It stopped for a while but then two groups recently went out
> about a week apart.
> I have full virus scan on my computer. It seems like it may be a
> hijacked idnetity and the spam is actually sent out by a 3rd party,
> but I really don't know. -Chrsi
>
> ----- Original Message -----
> *From:* Adam Fikso <mailto:adam14113 at AMERITECH.NET>
> *To:* ARISAEMA-L at NIC.SURFNET.NL <mailto:ARISAEMA-L at NIC.SURFNET.NL>
> *Sent:* Monday, November 22, 2010 7:44 PM
> *Subject:* Re: Apologies for Spam/ not in my sent folder.
>
> Chris? I'm not clear on what portion of this screen I'm
> forwarding to you is the objectionable Spam. Specify? Adam
> ----- Original Message -----
>
> *From:* Christopher Gussman <mailto:OlgaChrisEmily at MSN.COM>
> *To:* ARISAEMA-L at NIC.SURFNET.NL
> <mailto:ARISAEMA-L at NIC.SURFNET.NL>
> *Sent:* Monday, November 22, 2010 6:19 PM
> *Subject:* Re: Apologies for Spam/ not in my sent folder.
>
> Those messages are not even in my sent folder....so they may
> not be really originating here, although they are certainly
> going to my contact list.
> If this happens again, delete me from the list. Frustrating
> and embarassing.
>
> ----- Original Message -----
> *From:* Christopher Gussman <mailto:OlgaChrisEmily at MSN.COM>
> *To:* ARISAEMA-L at NIC.SURFNET.NL
> <mailto:ARISAEMA-L at NIC.SURFNET.NL>
> *Sent:* Monday, November 22, 2010 7:10 PM
> *Subject:* Re: Apologies for Spam
>
> Grrr. Not sure how to eliminate this.....these have gone
> out every couple weeks, despite full virus scans and other
> attempts to stop it! I am not even sure if they are
> really coming from my computer, or from Cyberspace! -Ch=ris
>
> ----- Original Message -----
> *From:* Russell Coker <mailto:cokerra at BELLSOUTH.NET>
> *To:* ARISAEMA-L at NIC.SURFNET.NL
> <mailto:ARISAEMA-L at NIC.SURFNET.NL>
> *Sent:* Monday, November 22, 2010 11:04 AM
>
> I think you've been hijacked...
>
> ----- Original Message -----
> *From:* Christopher Gussman
> <mailto:olgachrisemily at MSN.COM>
> *To:* ARISAEMA-L at NIC.SURFNET.NL
> <mailto:ARISAEMA-L at NIC.SURFNET.NL>
> *Sent:* Monday, November 22, 2010 9:55 AM
>
> http://jumubeny.chez.com/KatherineScott/ Secroet
> of super ero-straength
> Give hre more hto emotoins
> =========================================================================
> Search the Arisaema-L archives & subscription
> options -
> http://listserv.surfnet.nl/archives/Arisaema-l.html
>
> Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
>
> For help with this list, send an e-mail to the
> listowners at:
> Arisaema-L-request at nic.surfnet.nl
> =========================================================================
>
> =========================================================================
> Search the Arisaema-L archives & subscription options -
> http://listserv.surfnet.nl/archives/Arisaema-l.html
>
> Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
>
> For help with this list, send an e-mail to the
> listowners at:
> Arisaema-L-request at nic.surfnet.nl
> =========================================================================
>
> ========================================================================
> Search the Arisaema-L archives & subscription options -
> http://listserv.surfnet.nl/archives/Arisaema-l.html
>
> Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
>
> For help with this list, send an e-mail to the listowners a=t:
> Arisaema-L-request at nic.surfnet.nl
> ========================================================================
>
> ========================================================================
> Search the Arisaema-L archives & subscription options -
> http://listserv.surfnet.nl/archives/Arisaema-l.html
>
> Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
>
> For help with this list, send an e-mail to the listowners at:
> Arisaema-L-request at nic.surfnet.nl
> ========================================================================
>
> ========================================================================
> Search the Arisaema-L archives & subscription options -
> http://listserv.surfnet.nl/archives/Arisaema-l.html
>
> Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
>
> For help with this list, send an e-mail to the listowners at:
> Arisaema-L-request at nic.surfnet.nl
> ========================================================================
>
> ========================================================================
> Search the Arisaema-L archives & subscription options -
> http://listserv.surfnet.nl/archives/Arisaema-l.html
>
> Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
>
> For help with this list, send an e-mail to the listowners at:
> Arisaema-L-request at nic.surfnet.nl
> ========================================================================
========================================================================
Search the Arisaema-L archives & subscription options -
http://listserv.surfnet.nl/archives/Arisaema-l.html
Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/
For help with this list, send an e-mail to the listowners at:
Arisaema-L-request at nic.surfnet.nl
========================================================================
--------------000406010907040606000007
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Christopher,<br>
You are correct that your email address is being spoofed. If you
have a look at the full header file for the original email there is
a line<br>
<pre id="line1">X-Originating-IP: [93.113.85.59]
If you do a whois search you will see that the IP block is registered to =Fast-Link in Romania
<span class="bottom-dashed"><b>inetnum</b></span>: 93.113.80.0 =- 93.113.87.255
netname: SC-FASTLINK-SRL
descr: SC FASTLINK SRL
descr: Drumul Sarii nr.31A
descr: Bucuresti 6
country: ro
admin-c: <a href="http://www.db.ripe.net/whois?searchtext=TM3=602-RIPE&inverse_attributes=admin-c&form_type=simple">TM3602-=RIPE</a>
tech-c: <a href="http://www.db.ripe.net/whois?searchtext=TM3=602-RIPE&inverse_attributes=tech-c&form_type=simple">TM3602-R=IPE</a>
status: ASSIGNED PA
remarks: Registered through <a class="moz-txt-link-freetext" hr=ef="http://www.jump.ro/ip.html">http://www.jump.ro/ip.html</a>
mnt-by: <a href="http://www.db.ripe.net/whois?searchtext=RO-=MNT&inverse_attributes=mnt-by&form_type=simple">RO-MNT</a>
mnt-lower: <a href="http://www.db.ripe.net/whois?searchtext=RO-=MNT&inverse_attributes=mnt-lower&form_type=simple">RO-MNT</a>
mnt-routes: <a href="http://www.db.ripe.net/whois?searchtext=FAS=TLINK-MNT&inverse_attributes=mnt-routes&form_type=simple">FAS=TLINK-MNT</a>
source: RIPE # Filtered
<b>person</b>: Timaru Mihai
address: FASTLINK SRL
address: Drumul Sarii 31A
address: Bucharest
phone: +40.744.820.733
e-mail: <a class="moz-txt-link-abbreviated" href="mailto:mih=ai.timaru at fast-link.ro">mihai.timaru at fast-link.ro</a>
<span class="bottom-dashed">nic-hdl</span>: TM3602-RIPE
mnt-by: <a href="http://www.db.ripe.net/whois?searchtext=tim=arumihai-mnt&inverse_attributes=mnt-by&form_type=simple">tima=rumihai-mnt</a>
source: RIPE # Filtered
David McConachie
</pre>
<br>
On 23/11/2010 1:55 p.m., Christopher Gussman wrote:
<blockquote cite="mid:SNT117-DS1342AB2D9DC6A18B2C96AED73E0 at phx.gbl"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style>.hmmessage P {
PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px;=PADDING-TOP: 0px
}
BODY.hmmessage {
FONT-SIZE: 10pt; FONT-FAMILY: Tahoma
}
</style>
<meta content="MSHTML 6.00.6001.18527" name="GENERATOR">
<!--[gte IE 5]><?xml:namespace prefix="v" /><?xml:namespace prefi=x="o" /><![endif]-->
<div style="font-weight: normal; font-size: 10pt; color: rgb(0, 0=,
0); font-family: Verdana;">
<div>Adam-</div>
<div>I assumed it went to everyone, but maybe it just went to a
subset. It was a separate e-mail, not this one. Eac=h one is
different but it will have some bad writing to the effect of
: L ose WE igHt WI th New MEthod and a link w=hich should
not be clicked on. I thought it originated in one o=f my
Yahoo groups (plant related) and so canceled them. It sto=pped
for a while but then two groups recently went out about a week
apart. </div>
<div>I have full virus scan on my computer. It seems like i=t
may be a hijacked idnetity and the spam is actually sent out
by a 3rd party, but I really don't know. -Chrsi</di=v>
<blockquote style="padding-right: 0px; padding-left: 5px;
margin-left: 5px; border-left: 2px solid rgb(0, 0, 0);
margin-right: 0px;">
<div style="font: 10pt arial;">----- Original Message ----- <=/div>
<div style="font: 10pt arial;"><b>From:</b> <a
moz-do-not-send="true"
title="mailto:adam14113 at AMERITECH.NET"
href="mailto:adam14113 at AMERITECH.NET">Adam Fikso</a> </di=v>
<div style="font: 10pt arial;"><b>To:</b> <a
moz-do-not-send="true"
title="mailto:ARISAEMA-L at NIC.SURFNET.NL"
href="mailto:ARISAEMA-L at NIC.SURFNET.NL">ARISAEMA-L at NIC.SU=RFNET.NL</a>
</div>
<div style="font: 10pt arial;"><b>Sent:</b> Monday, November
22, 2010 7:44 PM</div>
<div style="font: 10pt arial;"><b>Subject:</b> Re: Apologies
for Spam/ not in my sent folder.</div>
<div><br>
</div>
<div><font size="3" face="Arial">Chris? I'm </font><f=ont
size="3" face="Arial">not clear on what portion o=f
this screen I'm forwarding to you is the objectionable
Spam. Specify? Adam</font></div>
<div> </div>
<div> ----- Original Message ----- </div>
<blockquote style="padding-right: 0px; padding-left: 5px;
margin-left: 5px; border-left: 2px solid rgb(0, 0, 0);
margin-right: 0px;">
<div style="background: none repeat scroll 0% 0% rgb(228,
228, 228); font: 10pt arial;"><b>From:</b> <a
moz-do-not-send="true"
title="mailto:OlgaChrisEmily at MSN.COM"
href="mailto:OlgaChrisEmily at MSN.COM">Christopher Gussma=n</a>
</div>
<div style="font: 10pt arial;"><b>To:</b> <a
moz-do-not-send="true"
title="mailto:ARISAEMA-L at NIC.SURFNET.NL"
href="mailto:ARISAEMA-L at NIC.SURFNET.NL">ARISAEMA-L at NIC.=SURFNET.NL</a>
</div>
<div style="font: 10pt arial;"><b>Sent:</b> Monday, Novembe=r
22, 2010 6:19 PM</div>
<div style="font: 10pt arial;"><b>Subject:</b> Re: Apologie=s
for Spam/ not in my sent folder.</div>
<div><br>
</div>
<!--[gte IE 5]><?xml:namespace prefix="v" /><?xml:namespace=prefix="o" /><![endif]-->
<div style="font-weight: normal; font-size: 10pt; color:
rgb(0, 0, 0); font-family: Verdana;">
<div>Those messages are not even in my sent folder....so
they may not be really originating here, although they
are certainly going to my contact list. </div>
<div>If this happens again, delete me from the list. &=nbsp;
Frustrating and embarassing. </div>
<blockquote style="padding-right: 0px; padding-left: 5px;
margin-left: 5px; border-left: 2px solid rgb(0, 0, 0);
margin-right: 0px;">
<div style="font: 10pt arial;">----- Original Message
----- </div>
<div style="font: 10pt arial;"><b>From:</b> <a
moz-do-not-send="true"
title="mailto:OlgaChrisEmily at MSN.COM"
href="mailto:OlgaChrisEmily at MSN.COM">Christopher
Gussman</a> </div>
<div style="font: 10pt arial;"><b>To:</b> <a
moz-do-not-send="true"
title="mailto:ARISAEMA-L at NIC.SURFNET.NL"
href="mailto:ARISAEMA-L at NIC.SURFNET.NL">ARISAEMA-L@=NIC.SURFNET.NL</a>
</div>
<div style="font: 10pt arial;"><b>Sent:</b> Monday,
November 22, 2010 7:10 PM</div>
<div style="font: 10pt arial;"><b>Subject:</b> Re:
Apologies for Spam</div>
<div><br>
</div>
<!--[gte IE 5]><?xml:namespace prefix="v" /><?xml:names=pace prefix="o" /><![endif]-->
<div>
<div>Grrr. Not sure how to eliminate this.....the=se
have gone out every couple weeks, despite full virus
scans and other attempts to stop it! I am =not even
sure if they are really coming from my computer, or
from Cyberspace! -Chris</div>
<blockquote style="padding-right: 0px; padding-left:
5px; margin-left: 5px; border-left: 2px solid rgb(0,
0, 0); margin-right: 0px;">
<div style="font: 10pt arial;">----- Original
Message ----- </div>
<div style="font: 10pt arial;"><b>From:</b> <a
moz-do-not-send="true"
title="mailto:cokerra at BELLSOUTH.NET"
href="mailto:cokerra at BELLSOUTH.NET">Russell
Coker</a> </div>
<div style="font: 10pt arial;"><b>To:</b> <a
moz-do-not-send="true"
title="mailto:ARISAEMA-L at NIC.SURFNET.NL"
href="mailto:ARISAEMA-L at NIC.SURFNET.NL">ARISAEM=A-L at NIC.SURFNET.NL</a>
</div>
<div style="font: 10pt arial;"><b>Sent:</b> Monday,
November 22, 2010 11:04 AM</div>
<div><br>
</div>
<div>I think you've been hijacked...</div>
<blockquote style="padding-right: 0px; padding-left=:
5px; margin-left: 5px; border-left: 2px solid
rgb(0, 0, 0); margin-right: 0px;">
<div style="font: 10pt arial;">----- Original
Message ----- </div>
<div style="background: none repeat scroll 0% 0%
rgb(228, 228, 228); font: 10pt arial;"><b>From:</=b>
<a moz-do-not-send="true"
title="mailto:olgachrisemily at MSN.COM"
href="mailto:olgachrisemily at MSN.COM">Christop=her
Gussman</a> </div>
<div style="font: 10pt arial;"><b>To:</b> <a
moz-do-not-send="true"
title="mailto:ARISAEMA-L at NIC.SURFNET.NL"
href="mailto:ARISAEMA-L at NIC.SURFNET.NL">ARISA=EMA-L at NIC.SURFNET.NL</a>
</div>
<div style="font: 10pt arial;"><b>Sent:</b>
Monday, November 22, 2010 9:55 AM</div>
<div><br>
</div>
<a moz-do-not-send="true"
title="http://jumubeny.chez.com/KatherineScott/="
href="http://jumubeny.chez.com/KatherineScott/"=>http://jumubeny.chez.com/KatherineScott/</a>
Secroet of super ero-straength<br>
Give hre more hto emotoins<br>
========================================================================<br>
Search the Arisaema-L archives & subscription
options -<br>
<a moz-do-not-send="true"
title="http://listserv.surfnet.nl/archives/Aris=aema-l.html"
href="http://listserv.surfnet.nl/archives/Arisaema-l.html">http://lists=erv.surfnet.nl/archives/Arisaema-l.html</a><br>
<br>
Arisaema-L HOME & GALLERY: <a
moz-do-not-send="true"
title="http://aeg.florapix.nl/"
href="http://aeg.florapix.nl/">http://aeg.flora=pix.nl/</a><br>
<br>
For help with this list, send an e-mail to the
listowners at:<br>
<a class="moz-txt-link-abbreviated" href="mailt=o:Arisaema-L-request at nic.surfnet.nl">Arisaema-L-request at nic.surfnet.nl</a=><br>
========================================================================<br>
</blockquote>
========================================================================<br>
Search the Arisaema-L archives & subscription
options -<br>
<a class="moz-txt-link-freetext" href="http://lis=tserv.surfnet.nl/archives/Arisaema-l.html">http://listserv.surfnet.nl/arc=hives/Arisaema-l.html</a><br>
<br>
Arisaema-L HOME & GALLERY:
<a class="moz-txt-link-freetext" href="http://aeg=.florapix.nl/">http://aeg.florapix.nl/</a><br>
<br>
For help with this list, send an e-mail to the
listowners at:<br>
<a class="moz-txt-link-abbreviated" href="mailto:=Arisaema-L-request at nic.surfnet.nl">Arisaema-L-request at nic.surfnet.nl</a><=br>
========================================================================<br>
</blockquote>
</div>
========================================================================<br>
Search the Arisaema-L archives & subscription
options -<br>
<a class="moz-txt-link-freetext" href="http://listser=v.surfnet.nl/archives/Arisaema-l.html">http://listserv.surfnet.nl/archive=s/Arisaema-l.html</a><br>
<br>
Arisaema-L HOME & GALLERY: <a class="moz-txt-link-f=reetext" href="http://aeg.florapix.nl/">http://aeg.florapix.nl/</a><br>
<br>
For help with this list, send an e-mail to the
listowners at:<br>
<a class="moz-txt-link-abbreviated" href="mailto:Aris=aema-L-request at nic.surfnet.nl">Arisaema-L-request at nic.surfnet.nl</a><br>
========================================================================<br>
</blockquote>
</div>
========================================================================<br>
Search the Arisaema-L archives & subscription options -<b=r>
<a class="moz-txt-link-freetext" href="http://listserv.su=rfnet.nl/archives/Arisaema-l.html">http://listserv.surfnet.nl/archives/Ar=isaema-l.html</a><br>
<br>
Arisaema-L HOME & GALLERY: <a class="moz-txt-link-freet=ext" href="http://aeg.florapix.nl/">http://aeg.florapix.nl/</a><br>
<br>
For help with this list, send an e-mail to the listowners
at:<br>
<a class="moz-txt-link-abbreviated" href="mailto:Arisaema=-L-request at nic.surfnet.nl">Arisaema-L-request at nic.surfnet.nl</a><br>
========================================================================<br>
</blockquote>
========================================================================<br>
Search the Arisaema-L archives & subscription options -<br>
<a class="moz-txt-link-freetext" href="http://listserv.surf=net.nl/archives/Arisaema-l.html">http://listserv.surfnet.nl/archives/Aris=aema-l.html</a><br>
<br>
Arisaema-L HOME & GALLERY: <a class="moz-txt-link-freetex=t" href="http://aeg.florapix.nl/">http://aeg.florapix.nl/</a><br>
<br>
For help with this list, send an e-mail to the listowners at:<b=r>
<a class="moz-txt-link-abbreviated" href="mailto:Arisaema-L=-request at nic.surfnet.nl">Arisaema-L-request at nic.surfnet.nl</a><br>
========================================================================<br>
</blockquote>
</div>
========================================================================<br>
Search the Arisaema-L archives & subscription options -<br>
<a class="moz-txt-link-freetext" href="http://listserv.surfnet.=nl/archives/Arisaema-l.html">http://listserv.surfnet.nl/archives/Arisaema=-l.html</a><br>
<br>
Arisaema-L HOME & GALLERY: <a class="moz-txt-link-freetext" h=ref="http://aeg.florapix.nl/">http://aeg.florapix.nl/</a><br>
<br>
For help with this list, send an e-mail to the listowners at:<br>
<a class="moz-txt-link-abbreviated" href="mailto:Arisaema-L-req=uest at nic.surfnet.nl">Arisaema-L-request at nic.surfnet.nl</a><br>
========================================================================<br>
</blockquote>
<br>
</body>
</html>
========================================================================<br>
Search the Arisaema-L archives & subscription options -<br>
http://listserv.surfnet.nl/archives/Arisaema-l.html<br>
<br>
Arisaema-L HOME & GALLERY: http://aeg.florapix.nl/<br>
<br>
For help with this list, send an e-mail to the listowners at:<br>
Arisaema-L-request at nic.surfnet.nl<br>
========================================================================<br>
--------------000406010907040606000007--
More information about the Arisaema-L
mailing list